alibabacloud-ddos-security-monitor[user] Perform security inspection and monitoring for Alibaba Cloud DDoS security products, covering DDoS Basic Protection, DDoS Native Protection, and DDoS...
Install via ClawdBot CLI:
clawdbot install sdk-team/alibabacloud-ddos-security-monitorGrade Limited — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Potentially destructive shell commands in tool definitions
curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bashCalls external URL not in known-safe list
https://aliyuncli.alicdn.com/setup.shAI Analysis
The skill uses Aliyun CLI to call official Alibaba Cloud APIs for DDoS monitoring, which is consistent with its stated purpose. The external URL (aliyuncli.alicdn.com) is the official Alibaba Cloud CLI installer, not a credential harvesting site. However, the skill includes a shell command to download and execute a script (curl | bash), which is a moderate security concern as it could be tampered with, but it's the standard installation method for the Aliyun CLI.
Audited May 10, 2026 · audit v1.0
Generated May 21, 2026
Conduct a comprehensive security inspection of all Alibaba Cloud DDoS protection products (Basic, Native, Anti-DDoS Pro/Premium) to assess overall security posture. Includes checking blackhole events, scrubbing events, and instance inventory.
Investigate specific DDoS attack events by querying attack logs from DDoS Native Protection or Anti-DDoS Pro. Provides detailed event data including start/end times, attack types, and volume for post-incident analysis.
Monitor L4 traffic anomalies, QPS spikes/drops, and HTTP status code surges (4xx/5xx) for web applications protected by Anti-DDoS Pro. Helps identify potential attacks or misconfigurations.
Perform inventory checks across all regions for DDoS Basic Protection, Native Protection, and Anti-DDoS Pro instances. Ensures proper provisioning and assists with compliance auditing.
Assess current DDoS protection coverage across ECS, SLB, and other Alibaba Cloud services to identify gaps. Supports planning upgrades from Basic to Native or Anti-DDoS Pro.
Offer recurring security inspection reports to clients using Alibaba Cloud, leveraging automated checks for DDoS events and traffic anomalies. Generates revenue via monthly subscription fees per customer account.
Provide on-demand forensic analysis of DDoS attacks using detailed event queries from the skill. Clients pay a retainer for guaranteed rapid response and detailed reporting.
Deliver periodic compliance and asset audits for enterprises using Alibaba Cloud DDoS products, ensuring proper coverage and configuration. Priced per audit or as part of a broader compliance package.
💬 Integration Tip
This skill is designed for direct CLI invocation; integrate it into automated workflows or incident response playbooks to streamline DDoS security monitoring without manual intervention.
Scored May 21, 2026
Parse, search, and analyze application logs across formats. Use when debugging from log files, setting up structured logging, analyzing error patterns, correlating events across services, parsing stack traces, or monitoring log output in real time.
Control remote Windows machines via SSH. Use when executing commands on Windows, checking GPU status (nvidia-smi), running scripts, or managing remote Windows systems. Triggers on "run on Windows", "execute on remote", "check GPU", "nvidia-smi", "远程执行", "Windows 命令".
Perform reverse lookup of gTLD domains hosted on a specified nameserver with optional filters by TLD and domain prefix length.
Configure OpenClaw installations with optimized settings, channel setup, security hardening, and production recommendations.
Essential curl commands for HTTP requests, API testing, and file transfers.
Connect to remote desktops via RDP, VNC, and SSH X11 with secure tunneling and troubleshooting.